An Inside Look at the Relay Market Powering Token Resellers and Fraud

Simon Willison's Blog News

Summary

An investigation into the market for reselling LLM tokens at a discount, often through abuse of free trials, stolen credentials, and chargeback attacks, primarily in China. The open-source proxies one-api and new-api are used to pool API keys and load balance requests.

No content available
Original Article
View Cached Full Text

Cached at: 07/27/26, 01:37 AM

# An Inside Look at the Relay Market Powering Token Resellers and Fraud Source: [https://simonwillison.net/2026/Jul/26/relay-market/](https://simonwillison.net/2026/Jul/26/relay-market/) 26th July 2026 \- Link Blog **[An Inside Look at the Relay Market Powering Token Resellers and Fraud](https://vectoral.com/blog/token-relay-market)**\([via](https://news.ycombinator.com/item?id=49058993)\) Fascinating investigation by Matt Lenhard into the market that has grown up around reselling LLM tokens at a discount by pooling API keys from various sources\. This looks to be mostly a thing in China\. Resellers sell access to an LLM proxy that offers significant discounts on regular API pricing, which they achieve by abusing free trials, proxying through unprotected support bots, or sometimes through stolen credit cards or chargeback attacks\. The software they are using for these proxies is open source \- mostly[one\-api](https://github.com/songquanpeng/one-api)and its more actively developed fork[new\-api](https://github.com/QuantumNous/new-api), both legitimate API proxy products which can be used to load\. balance requests across a pool of API credentials\. The buyers are seeking cheap tokens, avoiding geo\-restrictions, and in some cases collecting data for model distillation\. I've been cautious about exposing my own LLM\-driven applications publicly out of fear of abuse leading to big token bills\. The existence of this marketplace makes me even more cautious: there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit\. LLM vendors*really*need to get better at offering strict caps for their API keys\. I want my LLM apps to stop working the moment they hit a dollar threshold I've set for a period of time\. Here's[the \(Chinese language\) forum thread](https://www.v2ex.com/t/1196011)that served as the principal source for Matt's article\.

Similar Articles

Who Are the Token Brokers?

Reddit r/artificial

An investigative look at token brokers who buy unused AI API credits from startups and resell them at steep discounts, highlighting the emerging gray market for inference credits and its security implications.